LNX
Wazuh Agent - Linux
Wazuh, Inc.Agent log
/var/ossec/logs/ossec.log- ossec.json when log_format includes json.1 log location · Linux
Wazuh Agent logs to /var/ossec/logs/ossec.log on Linux.
Paths are printed exactly as Wazuh Agent writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.
Finding your way around Linux.
/var/ossec/logs/ossec.log- ossec.json when log_format includes json.